Let's fight for Malaysia's Popcat world ranking 🇲🇾

KNOWN ISSUE: Some reported that v3.0 might not working on a Mobile browser. I have written v3.1 for Mobile support and it's now under testing. You can get the script here and do let me know if the issue still persist: clicker-v3.1-dev.js

This is a JS auto-click script for PopCat challenge that directly bypass bot detection.

The script accesses the PopCat's Vue app instance directly and manipulate the key variables which contributes to click counter, spam counter and API call, so to ensure that:

1. You hit the max 800 clicks per 30s (according to the API rate limit)
2. You won't get marked as bot (100% works - Direct send clicks to API endpoint)

‼️ MALAYSIA IS 2TH PLACE NOW ‼️ 🎉🎉 (at time of writing script)

How to Use (Simple)

NOTICE: Only 1 browser allowed per device. API rate limit is enforced per IP address.

1. Copy all content of the file: clickbot-v3.min.js OR clickbot-v3-with-pop.min.js (with click counter)
2. Visit https://popcat.click/
3. Tap F12 to open browser devtool & navigate to "Console" tab
4. Tap Ctrl + v to paste all content into console
5. Tap Enter to run the script
6. (Optional) Navigate to "Network" tab to check if your API request accepted or rejected (in red text)

How to Use (Advanced - Python version)

NOTICE: Only 1 browser allowed per device. API rate limit is enforced per IP address.

1. Make sure you have install Python 3 with PIP (Python package manager)
2. Install Selenium package via PIP
3. Click here to download script
4. Extract files & double click "clickbot-v2.py" to run

About Popcat Rules

• API rate limit = 800 clicks per 30 seconds (So far I can't bypass this)
• If you send 800 clicks or above, system will only record 800 clicks & spam score +1
• If you hit 10 spam scores, system will mark you as bot & no further clicks will be sent to API

UPDATE: Clearing the bot cookie won't work at script level, because PopCat also set this.bot variable to true, unless you clear the cookie & refresh the browser (reload the script). The bot cookie is only useful for them to record you as bot when you refresh the browser.

You may check the script extracted from PopCat's App.vue (line 152).

See the file: popcat-App.html

Changelog

- Clickbot script V3

• Send 800 clicks per 30 seconds
• Directly send clicks via the Popcat's API endpoint

See the file: clickbot-v3.js

- Clickbot script V2 (DEPRECATED)

• Send 800 clicks per 30 seconds
• Use PopCat native sendStats() function
• Clear spam scores automatically

UPDATE: Some reported that they'll still get the "red eyes" using the JS script. So I have updated the script to V3 which solves the issue.

See the file: clickbot-v2.js

Screenshot

Still working after running over 12 hours:

Credit

Special thanks to senpai "Lim Shang Yi" (FB) for the inspiration.

Original FB post: https://www.facebook.com/groups/developerkaki/permalink/1487647504914491

Latest FB post: https://www.facebook.com/groups/developerkaki/permalink/1489535604725681

Disclaimer

The author is not responsible for any loss or damage of your personal assets including your laptops, PCs and brain XD

Attribution & License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License. You must give appropriate credit, provide a link to the original GitHub repository, and indicate if changes were made.

Please includes the line below in your redistributed and/or modified script:

Original author: Xavier Loo (https://github.com/jvloo/popcat-clicker)